i m used is only core jsp and servelets are used
in my project ....
1. firstly the login page is show , the user name and password verify by the container use the context.xml file from the database (use datasource technique)
2. when the user login , the main page or home page is show , at this time , the new session is created and user name attribute is set at the session scope , but at this time , when i click to the browser back button , the login page is show again , but in normal web site , after login , when we press the browser back button , the login page does not display without logout.
3. when the user click on to the logout button , the logout page is show, at this time the session is invalidate , but when click to the browser back button , the main page or home page again display, without any login , but in normal website , after logout , when click to the browser back button the pmain page or home page does not displayed without login
in my project , me use servelet 3.0 manual login() function to chcek the user name and password , and manual logout() function .